Privacy
We minimize identity data and separate public profile choices from private operational signals used to keep the point battle fair.
What we process
We process an anonymous account identifier, a long-lived device token, daily rotating network-derived hashes, visit-session counters, point actions, global chat messages and any public name, company profile or X handle you choose. Raw IP addresses are not stored in the point database.
Public profiles
Company names, logos, websites and X handles submitted with points are shown publicly on leader icons and supporter cards. X avatars are resolved from the public handle through Unavatar; opening a profile or company link takes you to that external service.
Analytics
We use Google Analytics to understand page traffic and product interaction. Analytics storage is denied until you allow it. Before consent Google receives cookieless measurement signals for aggregate modeling; after consent Google Analytics may use first-party Analytics cookies. Advertising storage and Google signals remain disabled.
Live activity and chat
Online counts come from active realtime connections. Today and total visit counters use pseudonymous visit sessions. Global chat shows the latest 50 messages and messages are retained for seven days unless moderation requires earlier removal.
Why
We use this data to issue minute points, enforce wallet and chat limits, operate the leaderboard, prevent abuse, improve the product and respond to reports.
Providers
Supabase provides authentication, database and realtime infrastructure; Cloudflare Turnstile helps prevent automated abuse; Unavatar resolves public X avatars; Google Analytics provides consent-aware traffic measurement; the application runs on dedicated server infrastructure in the European Union.
Your choices
You can use points without a public name or message and change Analytics consent above. Contact us to ask about access or deletion where applicable; abuse-prevention records may need to be retained.